CVE List

Id CVE No. Status Description Phase Votes Comments Actions
77554  CVE-2015-0291  Candidate  The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 before 1.0.2a allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.  Assigned (20141118)  None (candidate not yet proposed)    View
12274  CVE-2005-1068  Candidate  Cross-site scripting (XSS) vulnerability in sCssBoard 1.11 and earlier allows remote attackers to execute arbitrary Javascript via [url] tags.  Assigned (20050412)  None (candidate not yet proposed)    View
77810  CVE-2015-0547  Candidate  The D2CenterstageService.getComments service method in EMC Documentum D2 4.1 and 4.2 before 4.2 P16 and 4.5 before P03 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and bypass intended read-access restrictions via unspecified vectors.  Assigned (20141217)  None (candidate not yet proposed)    View
12530  CVE-2005-1324  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in index.php for phpMyVisites allow remote attackers to inject arbitrary web script or HTML via the (1) part, (2) per, or (3) site parameters.  Assigned (20050427)  None (candidate not yet proposed)    View
78066  CVE-2015-0803  Candidate  The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element"s attributes, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via a crafted HTML document.  Assigned (20150107)  None (candidate not yet proposed)    View

Page 19236 of 20943, showing 5 records out of 104715 total, starting on record 96176, ending on 96180

Actions